Skip to content

MirrorRelay v0.0.16

Choose a tag to compare

View all tags
@LuisCMerrick LuisCMerrick released this 22 Aug 06:45
· 11 commits to main since this release
v0.0.16
2fe1330

MirrorRelay v0.0.16 closes the v0.0.15 audit findings and hardens the release baseline.

Highlights:

  • Replaces preset administrator credentials with atomic first-use Admin registration, protected by the configured administration host/path and CIDR boundary.
  • Supports both APT DEB822 (.sources) and traditional sources.list output.
  • Applies a calmer, consistent bilingual Web UI with progressive disclosure; Managed Upstream Nginx technical details and Nginx snippets are hidden until requested.
  • Fixes all ten v0.0.15 audit findings across distributed routing, replay protection, credential boundaries, logging privacy and HTML auxiliary resources.
  • Upgrades Managed Upstream Nginx to 1.30.4, Go to 1.26.6, pins the vulnerability scan, and verifies exact static Nginx binaries for amd64 and arm64 packages.
  • Keeps release output limited to DEB, RPM, tar.gz and a vendored source archive; no container image is published.

Upgrade note: remove the obsolete admin.initial_username and admin.initial_password YAML keys (and any corresponding environment variables/password-file setting) before starting v0.0.16. Strict configuration loading intentionally rejects these removed keys.

See CHANGELOG.md for the complete change list and verify downloads with SHA256SUMS.

Assets 10
Loading